PT-2021-21262

Name of the Vulnerable Software and Affected Versions Devolutions Server versions prior to 2021.1.18 Devolutions Server LTS versions prior to 2020.3.20 Description The issue allows attackers to intercept private keys via a man-in-the-middle attack against the "connections/partial" endpoint, which...

CVE-2021-36382: Cleartext Transmission of Sensitive Information

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint which accepts cleartext...